CVE-2013-3630
Moodle SpellChecker Path Authenticated Remote Command Execution
Title source: metasploitExploitation Summary
EIP tracks 1 public exploit for CVE-2013-3630. PoCs published by Metasploit.
AI-analyzed exploit summary This Metasploit module exploits a command injection vulnerability in Moodle by manipulating the spellchecker path to execute arbitrary commands. It also leverages a session key escalation via XSS to gain admin privileges if needed.
Description
Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell pathname and then triggering a spell-check operation within the TinyMCE editor.
Exploits (1)
This Metasploit module exploits a command injection vulnerability in Moodle by manipulating the spellchecker path to execute arbitrary commands. It also leverages a session key escalation via XSS to gain admin privileges if needed.